package com.qk.filter;

import com.qk.utils.CurrentUserHoler;
import com.qk.utils.JwtUtils;
import io.jsonwebtoken.Claims;
import jakarta.servlet.*;
import jakarta.servlet.annotation.WebFilter;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;

import java.io.IOException;

@WebFilter(urlPatterns = "/*")
public class TokenFilter implements Filter {
    @Override
    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {

        HttpServletRequest request = (HttpServletRequest) servletRequest;
        HttpServletResponse response = (HttpServletResponse) servletResponse;
        //1.获取请求路径
        String url = request.getRequestURI();
        //2.判断请求路径是否为登录接口
        if (url.contains("/login")) {
            filterChain.doFilter(request, response);
            return;
        }
        //3.获取token
        String token = request.getHeader("token");
        //4.判断token是否为空
        if (token == null || token.isEmpty()) {
            response.setStatus(401);
            return;
        }
        //5.解析令牌,出错报401
        try {
            Claims claims = JwtUtils.parseToken(token);
            Integer userId = claims.get("id", Integer.class);
            CurrentUserHoler.setCurrentUser(userId);
        } catch (Exception e) {
            response.setStatus(401);
            return;
        }
        //6.放行
        filterChain.doFilter(request, response);
    }
}
